Overview

overview

9

Static

static

7

8b20977123...0N.exe

windows7-x64

9

8b20977123...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b20977123fdc31f8fad0450a339aa00N

  • Size

    36KB

  • Sample

    240908-lybnss1hrb

  • MD5

    8b20977123fdc31f8fad0450a339aa00

  • SHA1

    a8f44d727fe484f562b3bca62ffe6808a4ef1dbf

  • SHA256

    35fbd37935e28d914378f168732d57b637c93535605c9d12cca1915d4bbb0e60

  • SHA512

    5c500c2bc5bb1593dc467bf8602b86803253a0be40d13a91649b608e97d55057b0d1913ae0701f63d25805c4c44baada2ccaf349d708f63238bf3b9c5ea35343

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp2ZgZKfbi1xrfbi1xj:CTW7JJZENTBAOUYKGPGv

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      8b20977123fdc31f8fad0450a339aa00N

    • Size

      36KB

    • MD5

      8b20977123fdc31f8fad0450a339aa00

    • SHA1

      a8f44d727fe484f562b3bca62ffe6808a4ef1dbf

    • SHA256

      35fbd37935e28d914378f168732d57b637c93535605c9d12cca1915d4bbb0e60

    • SHA512

      5c500c2bc5bb1593dc467bf8602b86803253a0be40d13a91649b608e97d55057b0d1913ae0701f63d25805c4c44baada2ccaf349d708f63238bf3b9c5ea35343

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp2ZgZKfbi1xrfbi1xj:CTW7JJZENTBAOUYKGPGv

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3211) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks